This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/2-1oNblyI1Z0mr8_bqKeHfCdf3Q.roa File: 2-1oNblyI1Z0mr8_bqKeHfCdf3Q.roa (raw, json) Hash identifier: Keve3zQ8VUbFQO7wY46ONxW0HfizqWFbfY6VM1mLpPE= Subject key identifier: DB:ED:68:35:B9:72:23:56:74:9A:BF:3F:6E:A2:9E:1D:F0:9D:7F:74 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019A7E08808A09B97C2B63DA249F88AF38F7 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/2-1oNblyI1Z0mr8_bqKeHfCdf3Q.roa Signing time: Thu 13 Nov 2025 16:24:37 +0000 ROA not before: Thu 13 Nov 2025 16:24:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58087 IP address blocks: 5.253.247.0/24 maxlen: 24 37.221.93.0/24 maxlen: 24 45.11.229.0/24 maxlen: 24 45.13.225.0/24 maxlen: 24 45.13.236.0/24 maxlen: 24 45.13.237.0/24 maxlen: 24 45.13.238.0/24 maxlen: 24 45.13.239.0/24 maxlen: 24 45.86.155.0/24 maxlen: 24 45.90.98.0/23 maxlen: 23 45.131.64.0/24 maxlen: 24 45.133.74.0/24 maxlen: 24 92.118.206.0/24 maxlen: 24 109.71.252.0/24 maxlen: 24 194.15.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:08:80:8a:09:b9:7c:2b:63:da:24:9f:88:af:38:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Nov 13 16:24:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dbed6835b9722356749abf3f6ea29e1df09d7f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:b2:26:c0:25:08:19:b4:a4:8e:d8:b3:8e: 8d:30:48:e8:2d:21:75:41:02:ce:b6:97:d1:2f:9f: 09:95:6c:94:fb:52:9f:91:f2:81:4f:08:8b:20:27: 81:d2:e2:96:c1:e7:b2:9e:c3:4d:2e:c2:ed:5c:d3: e1:c9:f9:e9:78:3f:63:68:f5:aa:4d:e8:5e:a6:e5: 5c:e9:55:6d:75:64:75:ab:e2:7a:f3:b9:7f:18:0d: ad:9b:9a:01:17:cc:ab:12:f3:7c:70:89:c3:bf:2a: 71:b2:08:fc:42:05:9d:3a:0b:44:59:78:ce:4a:74: 29:79:5a:8f:7f:74:77:f3:6b:b7:17:31:32:5d:89: f3:53:81:36:81:d1:14:84:96:fe:b8:ab:07:3a:ff: 6f:0b:ea:f1:99:eb:cc:d1:83:e0:25:b4:7c:1e:96: 0a:62:bc:8a:9a:68:57:35:2c:2e:e3:d7:97:9f:3b: cb:16:af:d1:f7:eb:f4:84:f4:e2:82:12:8d:b9:49: 5c:9b:80:3e:7e:37:5c:c6:de:24:02:3e:dd:b7:72: ef:08:bb:10:78:fc:fe:fd:98:7e:ca:e5:d7:0f:92: 6b:2c:89:fd:5f:1b:78:e4:7e:f6:0d:45:93:10:78: fd:b6:bc:18:18:3d:28:99:0c:57:ee:e9:d0:02:93: 2e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:ED:68:35:B9:72:23:56:74:9A:BF:3F:6E:A2:9E:1D:F0:9D:7F:74 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/2-1oNblyI1Z0mr8_bqKeHfCdf3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.247.0/24 37.221.93.0/24 45.11.229.0/24 45.13.225.0/24 45.13.236.0/22 45.86.155.0/24 45.90.98.0/23 45.131.64.0/24 45.133.74.0/24 92.118.206.0/24 109.71.252.0/24 194.15.36.0/24 Signature Algorithm: sha256WithRSAEncryption 75:be:ef:1c:10:2b:a2:c9:62:b0:e2:22:d3:45:ea:8f:67:32: a5:b9:bd:ab:3d:4c:e9:7d:51:db:fe:dc:31:00:f0:cf:99:58: ab:21:ad:19:32:6b:78:67:a8:5d:3b:b1:ee:af:e6:36:32:ae: 18:f5:07:20:2e:65:fe:cd:16:f7:db:69:31:57:31:87:dc:2a: 3b:ea:4a:84:b2:25:ee:42:4e:51:5c:3c:b4:70:04:45:09:cc: e7:26:48:64:00:cc:09:44:5b:94:e3:8b:d5:e0:d5:4b:9b:55: d6:6e:c5:f8:9d:40:ad:da:e0:81:ad:2a:9a:e3:e8:05:7d:91: ac:f3:c8:a8:f2:b3:34:17:18:ab:42:ae:fa:ee:e6:58:b1:22: 41:39:7d:fa:be:9d:65:63:5f:82:89:2e:44:e5:fc:3d:23:60: 4e:1b:c0:42:75:01:b4:77:eb:0d:79:dc:cd:e6:17:a2:0e:56: 02:55:93:03:d1:5c:dc:da:80:32:1d:fc:d7:63:fc:28:a3:51: 9c:ad:8b:63:60:ca:8f:32:1d:5e:f9:5e:cd:db:5e:59:77:b3: ad:af:98:35:f0:95:21:a8:8e:01:07:19:b1:5b:d2:a2:a8:98: a7:96:3a:c6:61:f2:89:c0:64:87:17:1a:26:a6:3c:34:be:eb: 10:31:81:8d -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZp+CICKCbl8K2PaJJ+Irzj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjUxMTEzMTYyNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmVkNjgzNWI5NzIyMzU2NzQ5YWJmM2Y2ZWEyOWUxZGYwOWQ3Zjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9WyJsAlCBm0pI7Ys46NMEjoLSF1 QQLOtpfRL58JlWyU+1KfkfKBTwiLICeB0uKWweeynsNNLsLtXNPhyfnpeD9jaPWq TehepuVc6VVtdWR1q+J687l/GA2tm5oBF8yrEvN8cInDvypxsgj8QgWdOgtEWXjO SnQpeVqPf3R382u3FzEyXYnzU4E2gdEUhJb+uKsHOv9vC+rxmevM0YPgJbR8HpYK YryKmmhXNSwu49eXnzvLFq/R9+v0hPTighKNuUlcm4A+fjdcxt4kAj7dt3LvCLsQ ePz+/Zh+yuXXD5JrLIn9Xxt45H72DUWTEHj9trwYGD0omQxX7unQApMuLQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNvtaDW5ciNWdJq/P26inh3wnX90MB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvMi0xb05ibHlJMVowbXI4X2JxS2VIZkNkZjNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQABf33AwQA Jd1dAwQALQvlAwQALQ3hAwQCLQ3sAwQALVabAwQBLVpiAwQALYNAAwQALYVKAwQA XHbOAwQAbUf8AwQAwg8kMA0GCSqGSIb3DQEBCwUAA4IBAQB1vu8cECuiyWKw4iLT ReqPZzKlub2rPUzpfVHb/twxAPDPmVirIa0ZMmt4Z6hdO7Hur+Y2Mq4Y9QcgLmX+ zRb322kxVzGH3Co76kqEsiXuQk5RXDy0cARFCcznJkhkAMwJRFuU44vV4NVLm1XW bsX4nUCt2uCBrSqa4+gFfZGs88io8rM0FxirQq767uZYsSJBOX36vp1lY1+CiS5E 5fw9I2BOG8BCdQG0d+sNedzN5heiDlYCVZMD0Vzc2oAyHfzXY/woo1GcrYtjYMqP Mh1e+V7N215Zd7Otr5g18JUhqI4BBxmxW9KiqJinljrGYfKJwGSHFxompjw0vusQ MYGN -----END CERTIFICATE-----Generated at Fri Dec 5 16:32:03 2025 by rpki-client